CVEs.

Latest CVEs

1. 7.8High

   CVE-2026-26141 ↗ (opens in a new tab)

   Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

   MAMicrosoft Azure· Mar 10, 2026

2. 7.5High

   CVE-2026-26121 ↗ (opens in a new tab)

   Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

   MAMicrosoft Azure· Mar 10, 2026

3. 8.8High

   CVE-2026-26118 ↗ (opens in a new tab)

   Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

   MAMicrosoft Azure· Mar 10, 2026

4. 8.8High

   CVE-2026-26114 ↗ (opens in a new tab)

   Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

   M3Microsoft 365· Mar 10, 2026

5. 7.8High

   CVE-2026-26113 ↗ (opens in a new tab)

   Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Mar 10, 2026

6. 7.8High

   CVE-2026-26112 ↗ (opens in a new tab)

   Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Mar 10, 2026

7. 7.8High

   CVE-2026-26110 ↗ (opens in a new tab)

   Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Mar 10, 2026

8. 7.8High

   CVE-2026-26109 ↗ (opens in a new tab)

   Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Mar 10, 2026

9. 7.8High

   CVE-2026-26108 ↗ (opens in a new tab)

   Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

   M3Microsoft 365· Mar 10, 2026

10. 7.8High

    CVE-2026-26107 ↗ (opens in a new tab)

    Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

    M3Microsoft 365· Mar 10, 2026

11. 8.8High

    CVE-2026-26106 ↗ (opens in a new tab)

    Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    M3Microsoft 365· Mar 10, 2026

12. 9.3Crit

    CVE-2026-26105 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

    M3Microsoft 365· Mar 10, 2026

13. 7.5High

    CVE-2026-23664 ↗ (opens in a new tab)

    Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

14. 7.5High

    CVE-2026-23662 ↗ (opens in a new tab)

    Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

15. 7.5High

    CVE-2026-23661 ↗ (opens in a new tab)

    Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

    MAMicrosoft Azure· Mar 10, 2026

16. 8.8High

    CVE-2026-29784 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. From version 5.101.6 to 6.19.2, incomplete CSRF protections around /session/verify made it possible to use OTCs in login sessions different from the requesting session. In some scenarios this might have made it easier for phishers to take over a Ghost site. This issue has been patched in version 6.19.3.

    GHGhost(Pro)· Mar 7, 2026

17. 5.3Med

    CVE-2026-29190 ↗ (opens in a new tab)

    Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v3/backend.py). If a malicious backup file is provided to Karapace, an attacker may exploit insufficient path validation to perform arbitrary file read on the system where Karapace is running. The issue affects deployments that use the backup/restore functionality and process backups from untrusted sources. The impact depends on the file system permissions of the Karapace process. This issue has been patched in versio

    AIAiven· Mar 7, 2026

18. 2.0Low

    CVE-2026-29790 ↗ (opens in a new tab)

    dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path traversal vulnerability exists in dbt-common's safe_extract() function used when extracting tarball archives. The function uses os.path.commonprefix() to validate that extracted files remain within the intended destination directory. However, commonprefix() compares paths character-by-character rather than by path components, allowing a malicious tarball to write files to sibling directories with matching name prefixes. This issue has been patched in versions 1.34

    DCdbt Cloud· Mar 6, 2026

19. 8.8High

    CVE-2026-29089 ↗ (opens in a new tab)

    TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension. From version 2.23.0 to 2.25.1, PostgreSQL uses the search_path setting to locate unqualified database objects (tables, functions, operators). If the search_path includes user-writable schemas a malicious user can create functions in that schema that shadow builtin postgres functions and will be called instead of the postgres functions leading to arbitrary code execution during extension upgrade. This issue has been patched in version 2.25.2.

    TITimescale· Mar 6, 2026

20. 7.5High

    CVE-2026-29783 ↗ (opens in a new tab)

    The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection through repository files, MCP server responses, or user instructions) can exploit bash parameter transformation operators to execute hidden commands, bypassing the safety assessment that classifies commands as "read-only." This has been patched in version 0.0.423. The vulnerability stems from how the CLI's shell safety assessment evaluate

    GIGitHub· Mar 6, 2026

21. 7.2High

    CVE-2026-28277 ↗ (opens in a new tab)

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

    L/LangChain / LangSmith· Mar 5, 2026

22. 9.8Crit

    CVE-2026-29053 ↗ (opens in a new tab)

    Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1.

    GHGhost(Pro)· Mar 5, 2026

23. 8.4High

    CVE-2026-2836 ↗ (opens in a new tab)

    A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction. The issue occurs because the default HTTP cache key implementation generates cache keys using only the URI path, excluding critical factors such as the host header (authority). Operators relying on the default are vulnerable to cache poisoning, and cross-origin responses may be improperly served to users. Impact This vulnerability affects users of Pingora's alpha proxy caching feature who relied on the default CacheKey implementation. An attacker could exploit this for: * Cross-

    CLCloudflare· Mar 5, 2026

24. 9.3Crit

    CVE-2026-2835 ↗ (opens in a new tab)

    An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests. The issue occurs due to improperly allowing HTTP/1.0 request bodies to be close-delimited and incorrect handling of multiple Transfer-Encoding values, allowing attackers to send HTTP/1.0 requests in a way that would desync Pingora’s request framing from backend servers’. Impact This vulnerability primarily affects standalone Pingora deployments in front of certain backends that accept HTTP/1.0 requests. An attacker could craft a malicious payload following this requ

    CLCloudflare· Mar 5, 2026

25. 9.3Crit

    CVE-2026-2833 ↗ (opens in a new tab)

    An HTTP request smuggling vulnerability (CWE-444) was found in Pingora's handling of HTTP/1.1 connection upgrades. The issue occurs when a Pingora proxy reads a request containing an Upgrade header, causing the proxy to pass through the rest of the bytes on the connection to a backend before the backend has accepted the upgrade. An attacker can thus directly forward a malicious payload after a request with an Upgrade header to that backend in a way that may be interpreted as a subsequent request header, bypassing proxy-level security controls and enabling cross-user session hijacking. Impact T

    CLCloudflare· Mar 5, 2026

26. 8.5High

    CVE-2026-25750 ↗ (opens in a new tab)

    Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes. Prior to langchain-ai/helm version 0.12.71, a URL parameter injection vulnerability existed in LangSmith Studio that could allow unauthorized access to user accounts through stolen authentication tokens. The vulnerability affected both LangSmith Cloud and self-hosted deployments. Authenticated LangSmith users who clicked on a specially crafted malicious link would have their bearer token, user ID, and workspace ID transmitted to an attacker-controlled server. With this stolen token, an attacker could impe

    L/LangChain / LangSmith· Mar 4, 2026

27. 7.7High

    CVE-2026-3125 ↗ (opens in a new tab)

    A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.The @opennextjs/cloudflare worker template includes a /cdn-cgi/image/ handler intended for development use only. In production, Cloudflare's edge intercepts /cdn-cgi/image/ requests before they reach the Worker. However, by substituting a backslash for a forward slash (/cdn-cgi\image/ instead of /cdn-cgi/image/), an attacker can bypass edge interception and have the request reach the Worker directly. The JavaScript UR

    CLCloudflare· Mar 4, 2026

28. 6.1Med

    CVE-2026-20149 ↗ (opens in a new tab)

    A vulnerability in Cisco Webex could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. Cisco has addressed this vulnerability, and no customer action is needed. This vulnerability was due to improper filtering of user-supplied input. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to follow a malicious link. A successful exploit could have allowed the attacker to conduct an XSS attack against the targeted user.

    WEWebex· Mar 4, 2026

29. 7.0High

    CVE-2025-15558 ↗ (opens in a new tab)

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-buildx.exe, etc.) that are executed when a victim user opens Docker Desktop or invokes Docker CLI plugin features, and allow privilege-escalation if the docker CLI is executed as a privileged user. This issue affects Docker CLI: through 29.1.5 and Windows binaries acting as a CLI-plugin manager using the github.com/docker/cli/cli-plugins/manage

    DODocker· Mar 4, 2026

30. 5.3Med

    CVE-2026-3494 ↗ (opens in a new tab)

    In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

    AWAmazon Web Services· Mar 3, 2026

31. 8.6High

    CVE-2026-3136 ↗ (opens in a new tab)

    An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.

    GCGoogle Cloud· Mar 3, 2026

32. 6.9Med

    CVE-2026-3344 ↗ (opens in a new tab)

    A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.

    WAWatchGuard· Mar 3, 2026

33. 5.1Med

    CVE-2026-3343 ↗ (opens in a new tab)

    A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management user's browser when they click on a specially crafted link.

    WAWatchGuard· Mar 3, 2026

34. 8.6High

    CVE-2026-3342 ↗ (opens in a new tab)

    An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.

    WAWatchGuard· Mar 3, 2026

35. 8.7High

    CVE-2026-3338 ↗ (opens in a new tab)

    Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

36. 8.2High

    CVE-2026-3337 ↗ (opens in a new tab)

    Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_ccm. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

37. 8.7High

    CVE-2026-3336 ↗ (opens in a new tab)

    Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to AWS-LC version 1.69.0.

    AWAmazon Web Services· Mar 2, 2026

38. 4.6Med

    CVE-2026-1628 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=5.13.3 fail to attach listeners restricting navigation to external sites within the Mattermost app which allows a malicious server to expose preload script functionality to untrusted servers via having a user open an external link in their Mattermost server. Mattermost Advisory ID: MMSA-2026-00596

    MCMattermost Cloud· Mar 2, 2026

39. 1.9Low

    CVE-2026-3293 ↗ (opens in a new tab)

    A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts can lead to inefficient regular expression complexity. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 5fb0a8a318a2ed87f4022a1f56e742424ba94052. A patch should be applied to remediate this issue.

    SNSnowflake· Feb 27, 2026

40. 7.7High

    CVE-2026-26938 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files from the Kibana server filesystem, and perform Server-Side Request Forgery (SSRF) via Code Injection (CAPEC-242). This requires an authenticated user who has the workflowsManagement:executeWorkflow privilege.

    ECElastic Cloud· Feb 26, 2026

41. 7.5High

    CVE-2026-26937 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

    ECElastic Cloud· Feb 26, 2026

42. 7.5High

    CVE-2026-26936 ↗ (opens in a new tab)

    Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).

    ECElastic Cloud· Feb 26, 2026

43. 7.5High

    CVE-2026-26935 ↗ (opens in a new tab)

    Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

    ECElastic Cloud· Feb 26, 2026

44. 6.5Med

    CVE-2026-26934 ↗ (opens in a new tab)

    Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted, malformed payload causing excessive resource consumption and resulting in Kibana becoming unresponsive or crashing.

    ECElastic Cloud· Feb 26, 2026

45. 7.5High

    CVE-2026-26932 ↗ (opens in a new tab)

    Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requires the pgsql protocol to be explicitly enabled and configured to monitor traffic on the targeted port.

    ECElastic Cloud· Feb 26, 2026

46. 6.5Med

    CVE-2026-2845 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an authenticated user to cause denial of service by exploiting a Bitbucket Server import endpoint via repeatedly sending large responses.

    GIGitLab· Feb 25, 2026

47. 4.3Med

    CVE-2026-1747 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 17.11 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that, under certain conditions, could have allowed Developer-role users with insufficient privileges to make unauthorized modifications to protected Conan packages.

    GIGitLab· Feb 25, 2026

48. 7.5High

    CVE-2026-1725 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denial of service by sending specially crafted requests to a CI jobs API endpoint.

    GIGitLab· Feb 25, 2026

49. 7.5High

    CVE-2026-1662 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.

    GIGitLab· Feb 25, 2026

50. 7.5High

    CVE-2026-1388 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint under certain conditions.

    GIGitLab· Feb 25, 2026